Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
File: 5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa (raw, json)
Hash identifier: fOS9oLsfigcs+ltYjn0BnOHHbfD41vDR85RsvGl/Taw=
Subject key identifier: D3:2A:9D:F0:5B:68:74:74:7F:9A:85:E1:7B:8D:61:35:EC:79:5F:39
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 742CD10CC3C77710029CDDE397D793F048D4BADF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
Signing time: Thu 18 Jun 2026 20:19:36 +0000
ROA not before: Thu 18 Jun 2026 20:19:36 +0000
ROA not after: Wed 16 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2c:d1:0c:c3:c7:77:10:02:9c:dd:e3:97:d7:93:f0:48:d4:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jun 18 20:19:36 2026 GMT
Not After : Sep 16 23:59:59 2026 GMT
Subject: serialNumber=6af73ca7ce19f4e54ccae83632424a0f4db64daa3c9a9042f08eca845cf89036, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:14:8d:b2:dd:c8:8d:38:ec:22:7c:10:93:
bf:80:8b:ef:e7:f7:f4:1d:34:5c:8d:86:3e:10:7e:
e2:b7:96:e3:65:5c:b2:59:07:78:77:a8:a2:90:de:
a4:34:a0:78:2e:86:1a:78:7b:36:e1:9f:3c:d6:32:
34:93:8d:4f:f3:06:20:5a:0d:83:0a:6b:af:31:fd:
e9:b3:f2:5c:c3:40:b6:90:66:00:42:81:f4:0e:fd:
77:98:2a:ca:f0:d5:90:f7:1e:7a:dc:d1:7d:d5:18:
48:f6:87:14:c0:1c:da:a5:01:69:48:5b:1e:ef:fd:
53:43:6d:db:82:2a:01:4f:42:f2:61:b0:d4:0a:06:
c3:6e:e3:97:ac:a3:d1:01:c3:eb:2d:6a:16:2e:27:
ad:be:f4:c4:31:e5:07:8b:66:29:bd:90:4b:7a:44:
a6:94:8d:f4:cc:24:b1:4d:71:48:b0:2f:1e:dd:37:
1d:90:54:a2:5d:27:53:44:0d:60:17:9a:de:01:c6:
2d:7d:9e:27:1b:97:24:f7:5e:4c:c0:8f:f4:69:d0:
64:6f:5c:5f:7c:62:f7:06:6c:4b:e2:d6:26:9b:23:
52:1d:9d:28:f3:7b:d9:3b:1c:ff:e4:44:f9:b7:96:
de:11:a2:c4:ae:3a:91:ba:c8:2b:cf:94:c4:40:4f:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:9D:F0:5B:68:74:74:7F:9A:85:E1:7B:8D:61:35:EC:79:5F:39
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f400::/40
Signature Algorithm: sha256WithRSAEncryption
7e:98:f6:ce:5c:94:97:9b:38:ac:84:ca:c2:28:90:70:d4:7c:
de:2b:be:f3:5c:c4:8a:ac:f6:2e:50:2b:a6:10:26:e7:b7:72:
1c:e4:d6:d6:dd:07:5b:c6:6f:00:ca:e0:c8:02:a7:c8:75:3b:
81:16:b5:4a:55:a8:db:18:f8:87:1c:19:14:d2:69:8e:d0:41:
2d:67:3e:25:59:c9:fd:07:9d:b7:d3:c6:71:d7:c8:e4:22:cc:
84:90:37:2f:90:82:8c:b2:c5:51:01:d7:f9:a7:4f:bd:cc:14:
4d:64:2b:81:82:d0:ab:aa:b2:f4:8b:dc:34:63:99:df:9c:11:
c2:4f:d6:da:e2:78:a8:b3:5f:0c:03:60:76:eb:f7:d6:91:b2:
11:11:f5:35:9c:4d:09:53:81:87:35:23:68:b6:62:58:8f:81:
b4:bc:75:d7:08:e3:ab:20:83:0f:3f:1b:44:a7:36:c7:43:4c:
eb:6e:c5:c7:e9:b0:b2:36:1f:e2:02:13:25:c6:ca:f2:25:39:
ea:b2:02:4f:e5:d0:2b:1b:21:94:07:4d:d4:32:b8:21:79:f7:
a0:3a:ff:2d:8b:11:9e:08:a7:1b:5f:d6:69:18:cd:09:b0:94:
01:4b:ae:df:90:e0:9a:91:36:cd:6c:3b:95:8f:29:68:b1:b0:
9c:7e:47:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:42 2026 by rpki-client